Last Updated: 2026-04-27
Eddytor ApS (CVR DK42920673) engages the following subprocessors to deliver the Eddytor Service. We will provide at least 30 days' notice (by email or in-app) before adding a new subprocessor or replacing an existing one.
Primary Infrastructure
| Subprocessor |
Purpose |
Location |
| Hetzner Online GmbH |
Primary hosting of all Eddytor self-developed services |
Helsinki, Finland (EU) |
| Amazon Web Services (AWS) |
Eddytor-hosted sandbox storage (optional) |
eu-west-1, Ireland (EU) |
Authentication, Database, Vault, Storage
| Subprocessor |
Purpose |
Location |
| Supabase |
Authentication, database, secrets vault, application storage |
eu-north-1, Stockholm (EU) |
Payments
| Subprocessor |
Purpose |
Location |
| Stripe Payments Europe, Ltd. |
Payment processing, billing, invoicing |
EU / global |
Email
| Subprocessor |
Purpose |
Location |
| Mailchimp / Mandrill (Intuit) |
Transactional and marketing email |
US (with EU SCCs) |
Analytics
| Subprocessor |
Purpose |
Location |
| Matomo |
Privacy-friendly analytics; IPs anonymised to first two bytes; no third-party data sharing |
EU |
LLM Providers (Activated Only When You Enable AI Actions)
The following LLM providers are connected only if you, as the user, choose to enable AI Actions ("magic dust") or otherwise integrate an LLM through Eddytor. Your relationship with the selected LLM provider, including data handling and any training opt-outs, is governed by your agreement with that provider.
| Subprocessor |
Purpose |
Location |
| OpenAI |
LLM inference (when selected by you) |
US / global |
| Google (Gemini) |
LLM inference (when selected by you) |
US / EU regions, depending on configuration |
| Anthropic (Claude) |
LLM inference (when selected by you) |
US / EU regions, depending on configuration |
| Self-hosted Ollama |
Local LLM inference; either on customer hardware or on Eddytor-hosted hardware |
Customer- or Eddytor-controlled (EU when Eddytor-hosted) |
Notes
- All Eddytor self-developed services run within the EU.
- Where a subprocessor processes personal data outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards as required by the GDPR.
- For any questions about subprocessors, contact privacy@eddytor.com.